cee60808f701fa953c8a1b7aca0745de137e18ac88a005d5c3d22fa532d7bfca | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Untitled-1.ps1

windows10-2004-x64

8

Sharing

General

Target

Untitled-1.ps1
Size

83B
Sample

240722-e476mayhnn
MD5

f46012e520b6418942be56dfed250722
SHA1

914021b5e69fda9f86575f6ef6aa587baf86b63a
SHA256

cee60808f701fa953c8a1b7aca0745de137e18ac88a005d5c3d22fa532d7bfca
SHA512

bcea8e8820f42c3b92a3ebecbdd4750860524aaa1efe91461605836ec47efaa4cbc47ca4d653fb75ce5c8265d4bf87f1468bb67ddf8565ece9dfc07625eb3ca1

Score

8^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

Untitled-1.ps1

Resource

win10v2004-20240709-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  Untitled-1.ps1
- Size
  
  83B
- MD5
  
  f46012e520b6418942be56dfed250722
- SHA1
  
  914021b5e69fda9f86575f6ef6aa587baf86b63a
- SHA256
  
  cee60808f701fa953c8a1b7aca0745de137e18ac88a005d5c3d22fa532d7bfca
- SHA512
  
  bcea8e8820f42c3b92a3ebecbdd4750860524aaa1efe91461605836ec47efaa4cbc47ca4d653fb75ce5c8265d4bf87f1468bb67ddf8565ece9dfc07625eb3ca1
Score

8^/10

execution
- Blocklisted process makes network request
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.